CVE-2008-1379 Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for....
MediumCVSS 6.8
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the fbShmPutImage function in the MIT-SHM extension in the X server 1.4 in X.Org X11R7.3 allows context-dependent attackers to read arbitrary process memory via crafted values for a Pixmap width and height.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| x11 | = r7.3 | No fix listed |
| debian/xorg-server(Debian:12) | < 2:1.4.1~git20080517-2 | 2:1.4.1~git20080517-2 |
| debian/xorg-server(Debian:13) | < 2:1.4.1~git20080517-2 | 2:1.4.1~git20080517-2 |
| debian/xorg-server(Debian:14) | < 2:1.4.1~git20080517-2 | 2:1.4.1~git20080517-2 |
References
- SSRT080083 vendor-advisory
- 20080611 Multiple Vendor X Server MIT-SHM Extension Information Disclosure Vulnerability third-party-advisory
- APPLE-SA-2009-02-12 vendor-advisory
- [xorg] 20080611 X.Org security advisory june 2008 - Multiple vulnerabilities in X server extensions mailing-list
- SUSE-SA:2008:027 vendor-advisory
- SUSE-SR:2008:019 vendor-advisory
- RHSA-2008:0502 vendor-advisory
- RHSA-2008:0504 vendor-advisory
- RHSA-2008:0512 vendor-advisory
- 30627 third-party-advisory vendor-advisory
- 30628 third-party-advisory vendor-advisory
- 30629 third-party-advisory vendor-advisory
- 30630 third-party-advisory vendor-advisory
- 30637 third-party-advisory vendor-advisory
- 30659 third-party-advisory vendor-advisory
- 30664 third-party-advisory vendor-advisory
- 30666 third-party-advisory vendor-advisory
- 30671 third-party-advisory
- 30715 third-party-advisory
- 30772 third-party-advisory
- 30809 third-party-advisory
- 30843 third-party-advisory
- 31025 third-party-advisory
- 31109 third-party-advisory
- 32099 third-party-advisory
- 32545 third-party-advisory
- 33937 third-party-advisory
- GLSA-200806-07 vendor-advisory
- 1020246 vdb-entry
- 238686 vendor-advisory
- support.apple.com
- support.avaya.com
- wiki.rpath.com
- DSA-1595 vendor-advisory
- GLSA-200807-07 vendor-advisory
- MDVSA-2008:115 vendor-advisory
- MDVSA-2008:116 vendor-advisory
- MDVSA-2008:179 vendor-advisory
- RHSA-2008:0503 vendor-advisory
- 20080620 rPSA-2008-0200-1 xorg-server mailing-list
- 20080621 rPSA-2008-0201-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs mailing-list
- 29669 patch vdb-entry
- USN-616-1 vendor-advisory
- ADV-2008-1803 vdb-entry
- ADV-2008-1833 vdb-entry
- ADV-2008-1983 vdb-entry
- ADV-2008-3000 vdb-entry
- xorg-fbshmputimage-information-disclosure(43016) vdb-entry
- issues.rpath.com
- issues.rpath.com
- oval:org.mitre.oval:def:8966 signature vdb-entry
- Debian Security Tracker CVE-2008-1379 vendor-advisory